Solved

the system administrator has set policies to prevent this installation

Posted on 2014-01-01
13
610 Views
Last Modified: 2014-01-23
hi i am getting ready to upgrade my win 2003 domain to a win 2008 domain but have one issue i cannot seem to resolve.

i am running a 'ris server' with multiple xp images ok.

i have also now created an image via 'risetup.exe' onto my ris server just like i did with with 1st xp flat image.

the issue i have is that i 'pre-staged' a machine by adding the 'hostname & mac address' via my master dc aduc.

i then successfully received my win 2003 image installed onto my secondary domain member server.

when i logged on, it only allowed me to logon to the domain and 'no local user account was created' which was expected.

i then attempted to install sp2 but this would not install showing the below:

"you do not have permission to update win server 2003"

i decided to create a local 'admin' account and then logged on locally & installed sp2 successfully

i then logged onto the secondary domain member server and attempted to install 'isa 2006', but it prompts a message:

" is that after installing 'win 2003' image onto another server"

note:  as i am not using 3rd party software there was no requirement to use: sysprep in order to select 'generalize' - as advised previously.

so have used 'riprep.exe' for my xp.

question 1.  does anyone know if there is a way to resolve this as i have tried 'delegation, batch job, service, via my gpo and that appears not to resolve my issue  ?

possible resolution:

it maybe the proper way but i am not sure, so i was thinking about 'not pre-staging' my win 2003 domain member server and just installing and adding a new name later, to see if that rectifies my problem - but i have not tried that yet  ?
0
Comment
Question by:mikey250
  • 7
  • 6
13 Comments
 
LVL 27

Accepted Solution

by:
Jason Watkins earned 500 total points
Comment Utility
What is the benefit of pre-staging? Are you trying to automate the process of naming the host after RIS images it? I would add server to the domain manually.
0
 

Author Comment

by:mikey250
Comment Utility
hi i realise my main thread did not show the exact message:

note: i am aware i could have used the 'setup manager' to do the below but thought i would try the below:

i just assumed that if i wish to take control of machines i thought 'pre-staging' was one method of doing things but did not realise the issue i would have via domain admin account installing sp2 and did not realise the issue via the domain admin account when installing isa 2006 receiving the below message:

"the system administrator has set policies to prevent this installation"

i would like to know if the above can be put right, unless there was a specific 'update' to fix those issues above.

as a way round i have i have now removed the server from the domain although i had to logon locally to do that as when logged onto the domain, it would not allow me to do that due to it also being dimmed out.

so i have now rebooted the server and just completed a new image install without using the 'pre-staged' functionality and i have also attempted to install isa 2006 which all appears ok.  so i am now continuing to install sp2 before i do install isa 2006.
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 500 total points
Comment Utility
Pre-staging is good, that's what we do where I work. The error looks like a GPO result from a software restriction policy more than anything.
0
 

Author Comment

by:mikey250
Comment Utility
hi i only installed via ris image win 2003 & attempted to install 'win 2003 sp2 manually & then isa 2006 manually & not via gpo\computer config\software installation\ for isa 2006.

if 'pre-staging' is good, what do i do to resolve the issue i have  ?
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 500 total points
Comment Utility
Is there a domain user account that RIS uses to set up the image? (Pardon me. It has been a while since I've worked with RIS). Try doing the install under that account. Also, does the install process place the server in any OU that might have a restrictive GPO applied?
0
 

Author Comment

by:mikey250
Comment Utility
currently i am only using 'administrator domain' account for everything & yes my 'isa 2006 firewall' is in an 'ou/gpo' for 'windows updates' etc via gpo\computer config & user config - only, so everything is syncing.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 500 total points
Comment Utility
I'd take the ISA server out of its final OU for updating, install SP2, then put it back. See if that works.
0
 

Author Comment

by:mikey250
Comment Utility
what i have been doing is installing image successfully, which locates by default the computer in the computer container via aduc and then logging on master dc 'aduc' and 'moving' isa 2006 to 'ou'

so are you saying install image & sp2 in aduc computer container & then 'move' to 'ou' & install 'isa' manually as usual  ?
0
 
LVL 27

Expert Comment

by:Jason Watkins
Comment Utility
Right
0
 

Author Comment

by:mikey250
Comment Utility
ok, i might give that ago tomorrow because as i mentioned earlier i have currently 'deleted' the 'pre-staging' and installed image without 'pre-staging' so once i have confirmed i can install 'isa' as expected i will 'pre-stage' again and take your advice as it is good to know.

if it fails, any other suggestions, or maybe i should install, image & sp2 & isa in the aduc computer container 1st then 'move' to specific 'ou'  ?
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 500 total points
Comment Utility
How often do you install Windows Server? RIS is a convenient solution for deploying multiple client operating systems, am unsure if it is applicable to servers. I've always ever installed servers manually as they have all wound-up being different. Installing into the default 'Computers' folder is fine as it only inherits the domain GPO there and isn't subject to the specialized GPO's one may encounter in sub-OU's.
0
 

Author Comment

by:mikey250
Comment Utility
yes i realise ris is a convenient solution for deploying client os, but just wanted to know how to do it and then that was the end of the task as i already have all my xp images located on my ris server.

once done i can eventually upgrade to wds and move master dc to win 2008.

appreciated for that advice and will let you know sometime tomorrow.
0
 

Author Closing Comment

by:mikey250
Comment Utility
thanks for the advice.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now